​
DirectorySecurity Advisories
Sign In
Security Advisories

CGA-7wj7-9876-vw6h

Published

Last updated

https://images.chainguard.dev/security/CGA-7wj7-9876-vw6h
Package

py3-django

Latest Update
Fixed
Fixed Version

5.0.2-r0

Aliases
  • CVE-2024-24680
  • GHSA-xxj9-f6rv-m3x4

Severity

5.9

Medium

CVSS V3

Summary

Django denial-of-service attack in the intcomma template filter

Description

An issue was discovered in Django 3.2 before 3.2.24, 4.2 before 4.2.10, and Django 5.0 before 5.0.2. The intcomma template filter was subject to a potential denial-of-service attack when used with very long strings.

References

Updates


Safe Source for Open Sourceâ„¢
Media KitContact Us
© 2024 Chainguard. All Rights Reserved.
Private PolicyTerms of Use

Product

Chainguard Images